Security Changes & Fixes
- Graveyard now detects zip-slip attacks. This means that Graveyard will refuse to unarchive archives that try to access files out of their scope.
- Graveyard now only uses libraries that are developed by the Golang developers.
Breaking Changes
- Commands are now provided through the Go
flag
module. This means that commands will need to be prefixed with-
or--
, this allows users to string together commands and complete more than one action at once. - Grave filenames now end in
.buried
instead of.tar.gz.buried
, you will need to rename graves before use with this version, see the release discussion for details.
New Features
- Graveyard is now fully portable! This means that you can store graves on a USB drive and access them across Windows, Linux, and macOS. The
grave.zip
file currently only supports x64 architectures, but includes binaries for Windows, Linux, and macOS. - Speaking of Windows and macOS... this is the first release to support those platforms!
- Graveyard also now provides builds for other architectures.
Changes for Developers
- Graveyard now provides a library for external applications to encrypt data within graves.
- The command line application now simply interacts with the library.
Other Changes
- Documentation has been moved into docs.
- Lot of dependencies have been removed.
- Migrate to
os
fromioutil
. - Graveyard is now a much smaller binary (7.38 MB to 3.22 MB.)
Full Changelog: 1.1.5...2.0.0
This release includes breaking changes. For a migration guide view the release discussion.